This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/VC8NRBQFpiHlhRonZVIldhZGasE.roa
File:                     VC8NRBQFpiHlhRonZVIldhZGasE.roa (raw, json)
Hash identifier:          n6eALs6Euv1KSbIitpCB0zQ5ftpmSt+HjVH1dtNV2eE=
Subject key identifier:   54:2F:0D:44:14:05:A6:21:E5:85:1A:27:65:52:25:76:16:46:6A:C1
Certificate issuer:       /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Certificate serial:       019B7BA4071E7CD91E7857D173A2680EE2C0
Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/VC8NRBQFpiHlhRonZVIldhZGasE.roa
Signing time:             Thu 01 Jan 2026 22:18:25 +0000
ROA not before:           Thu 01 Jan 2026 22:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44795
IP address blocks:        62.128.160.0/19 maxlen: 19
                          62.128.168.0/21 maxlen: 21
                          62.128.168.0/22 maxlen: 22
                          62.128.172.0/22 maxlen: 22
                          82.214.192.0/18 maxlen: 18
                          82.214.210.0/24 maxlen: 24
                          82.214.240.0/21 maxlen: 21
                          82.214.240.0/22 maxlen: 22
                          82.214.244.0/22 maxlen: 22
                          128.65.64.0/19 maxlen: 24
                          185.117.52.0/22 maxlen: 22
                          195.238.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:07:1e:7c:d9:1e:78:57:d1:73:a2:68:0e:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
        Validity
            Not Before: Jan  1 22:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=542f0d441405a621e5851a276552257616466ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:6c:cf:63:2c:fb:4d:af:75:b7:c9:7e:61:
                    37:52:7e:5e:4e:48:8c:d1:8c:a0:3d:1b:8f:46:84:
                    17:e9:43:32:5e:d3:c7:11:64:75:8e:76:35:50:99:
                    a5:a8:70:3a:85:1b:43:4f:a7:fd:96:8d:58:88:6c:
                    f9:b9:2a:3d:95:a1:5d:e0:e5:ee:ee:fd:79:07:84:
                    7b:50:75:7f:2d:82:89:41:bd:d8:32:d0:24:5f:b5:
                    34:54:ef:7b:45:bc:cd:fb:11:bb:05:31:cf:a0:1d:
                    f9:ba:88:1a:67:73:44:ad:a7:ee:9c:38:22:8a:1c:
                    c5:bc:a8:42:05:ee:95:68:b4:89:ab:77:1c:3f:7a:
                    ad:0c:31:f6:15:c7:3f:b7:2c:15:c3:83:d7:7d:0e:
                    99:1f:a5:3f:e0:be:e2:c3:85:1c:5f:74:15:9e:4d:
                    89:db:1a:2c:e1:1f:11:3e:31:70:30:8b:c3:ff:49:
                    40:78:b7:89:b0:72:f3:ee:ce:93:60:d1:c3:98:4e:
                    cf:85:2e:61:97:ad:8c:16:57:c6:c5:a8:e7:93:b3:
                    20:54:d4:f4:8b:bd:d5:a5:17:1f:9e:71:b6:0a:19:
                    ae:4d:f3:ae:5a:a3:33:8a:91:5f:11:a7:f9:bb:ec:
                    26:c4:f4:8b:d3:47:1b:8f:3d:79:9d:be:dd:26:b4:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:0D:44:14:05:A6:21:E5:85:1A:27:65:52:25:76:16:46:6A:C1
            X509v3 Authority Key Identifier:
                keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/VC8NRBQFpiHlhRonZVIldhZGasE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.128.160.0/19
                  82.214.192.0/18
                  128.65.64.0/19
                  185.117.52.0/22
                  195.238.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:04:f9:f8:f9:ee:29:9b:f3:73:91:34:d2:ef:cf:5c:98:
         3e:8c:fd:be:ff:75:93:be:58:9a:35:ea:0a:c2:58:e4:60:a0:
         87:a6:46:75:d8:05:98:d1:27:2d:8b:10:af:db:8f:ee:2b:a2:
         67:b8:b0:7f:e8:b1:64:a2:e6:92:48:d6:e9:78:02:8b:a8:17:
         33:89:b5:18:82:8d:3d:59:cd:cb:42:11:a9:31:3d:5a:e7:9a:
         e7:8a:3a:ef:ac:93:9f:6c:2f:5f:51:4f:62:ca:f1:be:bc:e6:
         03:a3:f1:a3:fd:ef:e2:f3:ea:40:93:33:91:43:62:9e:6a:74:
         c7:15:ca:05:ea:b6:89:1c:47:d2:e3:29:a5:9a:58:ac:e5:56:
         22:e7:de:38:cc:9d:44:7e:33:2f:13:3c:88:a9:b5:28:ec:28:
         65:61:42:4d:86:8d:31:d9:56:7e:f1:dd:14:1e:46:ca:93:da:
         50:9f:9f:70:86:02:9f:c1:fd:a2:ef:6a:30:15:e8:f3:68:a0:
         17:56:53:e7:26:fd:14:e8:0a:df:b1:4d:e4:c1:14:92:d3:00:
         79:43:b0:a4:a8:f9:5d:bf:fd:99:8c:e5:cb:90:b4:d6:64:cf:
         9f:e7:6b:0e:03:4c:0e:a0:cb:36:f3:43:fd:ed:84:7d:71:50:
         ee:58:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:52 2026 by rpki-client